Doofinder WooCommerce Plugin Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive information has been identified in the Doofinder for WooCommerce plugin, specifically in versions through 2.10.13. This issue arises from the insertion of sensitive data into sent communications, which could be retrieved by unauthorized parties.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information that is typically restricted from regular users, potentially allowing for further exploitation of other vulnerabilities within the system.

Remediation

Users of the Doofinder for WooCommerce plugin should update to version 2.10.14 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.